Results 13 issues of Simon Masson

## Summary The `ed_on_bw6_761` curve is an elliptic curve whose base field matches the BW6-761 curve. This curve is useless and should be replaced by the BLS12-377 curve: * BLS12-377...

When I run `anoma wallet address list`, I get ``` "matchmaker-1": Established: atest1v4ehgw36xfzy2sesxge5vsjrxg652vjpxqcrjs35g5er233kg9q5vwf5x9p5vwfeg9p5y32zrfl5vh "matchmaker-10": Established: atest1v4ehgw36xgmn2w2zg5unvv3jgcuyy334xfprz33nxyerwdpjxvenwv29gverjd3eg5u52s3kkzr39j "matchmaker-2": Established: atest1v4ehgw36x9qnwde38ycrqd3cg5erxd69xgcrvdfh8prygwfcxezyz3jyxgcyxv2zx4ryy3jy3qdmsu "matchmaker-3": Established: atest1v4ehgw36ggm5v3z9gycygven8ycngvjzg5m5vsfkx3z5zwf58qmnvse4gfqnjvfsxscrqsfez9nw8v . . . ``` It could be cleaner...

cli
wallet

MASP uses some constants that are different from the original Sapling implementation. I wrote a simple test to check if the points are in the right subgroup, in order to...

hash_to_curve is available in Halo 2. Though, it computes a hash_to_field using Blake2. Currently, we haven't got the blake2 circuit so we plan to replace Blake2 with Sha256, and then...

In the current design, the VP description is the verifier key of the circuit. In this context, it is possible to generate two different circuits with the same VP description....

security

Using Poseidon with `bls12_377::ScalarField` is not very efficient because we are restricted to `α=11`. In the case of `bls12_381::ScalarField`, we have `α=5` (but we cannot have a 2-layer with this...

prio:low
efficiency

We want to be able to sign notes. Two options for not leaking information on the owner: * Use randomized signatures as in Zcash * Use ZK proofs for the...

This issue summarizes the choices of hash functions in Taiga for our first implementation. Taiga involves hash function circuits in the different validity predicates. For the first version of Taiga,...

For flexibility, we would like to have curve arithmetic circuits in Short Weierstrass coordinates. It would allow us using Pasta curves if we want to switch to IPA polynomial commitment....

prio:low

Once we are able to use Poseidon hash circuits (see issue #26), we can implement simple sending/receiving/token circuits. We aim to get these first ones as a first step: 1....